CVE-2026-68325

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Bound the early ACPI HID map

The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing the map size.

Check the capacity at the common found label before parsing the HID and UID or writing the entry.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < 9ae6b1b972ce01d3316c8a5f7f58c8b3668cc6bb; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < e5e0098f8cd82f8b3c8687a8f686309565d51745; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < afe7ea0520c49586703f210865ace2d70b017e48; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < 1e31d2394e0db69541b1591d46c5ad6431c81db3; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < abe5d7962f09adada9c4fb25b816dddd3f97c55d; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < e5ebe8544df1a1c3611739a8622156094fe470df; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < 030a8e84f8f1b6e96f469c84a13a225c3699910b; >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, < fb80117fddb5b477218dc99bb53911b72c3847f8
LinuxLinux4.7

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-683268.8In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwiCVE-2026-68327In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxl_pci_init_one()CVE-2026-68328In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfp_cpp_resource_find() allocatesCVE-2026-683298.8In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommu_compCVE-2026-68336.5The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands tCVE-2026-683307.8In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airoha_npu_send_CVE-2026-68331In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint()CVE-2026-68332In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airoha_ppe_deinit() airohCVE-2026-68333In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fsl_mc_get_endpoinCVE-2026-68334In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() rxrpc_wake_up_iCVE-2026-683357.8In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdCVE-2026-68336In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconf_all NULL dereference when IPv6 is disabled When b